Release v1.4.3: html sanitizer docs and 100% coverage

Author: HecFranco

docs/CHANGELOG.md

@@ -7,11 +7,23 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.4.3] - 2026-08-19
+
+### Changed
+
+- **Tests:** 100% PHP coverage for `html_sanitizer` wiring in `Ckeditor5EditorType`.
+
+[1.4.3]: https://github.com/nowo-tech/CKEditor5EditorBundle/releases/tag/v1.4.3
+
+## [1.4.2] - 2026-08-19
+
 ### Added
 
 - **`html_sanitizer` config** (opt-in, BC-safe): set to `allowlist` or a custom service id to sanitize HTML on form submit via `Ckeditor5HtmlSanitizeTransformer` (mirrors TiptapEditorBundle).
 - **Flex recipe `when@prod`**: enables `html_sanitizer: allowlist` by default in production profiles.
 
+[1.4.2]: https://github.com/nowo-tech/CKEditor5EditorBundle/releases/tag/v1.4.2
+
 ## [1.4.1] - 2026-08-18
 
 ### Changed

docs/UPGRADING.md

@@ -26,6 +26,30 @@
 
 ## Unreleased
 
+## To 1.4.3 from 1.4.2
+
+No application upgrade steps.
+
+```bash
+composer update nowo-tech/ckeditor5-editor-bundle
+```
+
+## To 1.4.2 from 1.4.1
+
+Review production config if you render editor HTML from untrusted sources. The Flex recipe sets `when@prod`:
+
+```yaml
+nowo_ckeditor5_editor:
+    html_sanitizer: allowlist
+```
+
+Hosts that already trust all editors may keep the default (no sanitizer) or set a custom `PageLayoutHtmlSanitizerInterface` service id.
+
+```bash
+composer update nowo-tech/ckeditor5-editor-bundle
+php bin/console cache:clear
+```
+
 ## To 1.4.1 from 1.4.0
 
 No application upgrade steps. Demos only: Hot Reload Bundle `^1.4` (FrankenPHP Mercure/`hot_reload`, `dev`/`test`).